io_uring: fix memleak in io_sqe_files_register()
authorYang Yingliang <yangyingliang@huawei.com>
Fri, 10 Jul 2020 14:14:20 +0000 (14:14 +0000)
committerJens Axboe <axboe@kernel.dk>
Fri, 10 Jul 2020 13:50:21 +0000 (07:50 -0600)
commit667e57da358f61b6966e12e925a69e42d912e8bb
treeb1164e3e7b92f054f46d371c9c84edfb4fe44ab8
parentf3bd9dae3708a0ff6b067e766073ffeb853301f9
io_uring: fix memleak in io_sqe_files_register()

I got a memleak report when doing some fuzz test:

BUG: memory leak
unreferenced object 0x607eeac06e78 (size 8):
  comm "test", pid 295, jiffies 4294735835 (age 31.745s)
  hex dump (first 8 bytes):
    00 00 00 00 00 00 00 00                          ........
  backtrace:
    [<00000000932632e6>] percpu_ref_init+0x2a/0x1b0
    [<0000000092ddb796>] __io_uring_register+0x111d/0x22a0
    [<00000000eadd6c77>] __x64_sys_io_uring_register+0x17b/0x480
    [<00000000591b89a6>] do_syscall_64+0x56/0xa0
    [<00000000864a281d>] entry_SYSCALL_64_after_hwframe+0x44/0xa9

Call percpu_ref_exit() on error path to avoid
refcount memleak.

Fixes: 05f3fb3c5397 ("io_uring: avoid ring quiesce for fixed file set unregister and update")
Cc: stable@vger.kernel.org
Reported-by: Hulk Robot <hulkci@huawei.com>
Signed-off-by: Yang Yingliang <yangyingliang@huawei.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
fs/io_uring.c